Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
File: bn8ivutSxuUaJCKxORQu6gP7XU0.mft (raw, json)
Hash identifier: U/LDS4B2SqC90zAFJaNO200Q6Hze8IjbbEqFK7sPYZQ=
Subject key identifier: CB:BA:0B:DE:8D:F1:CE:33:58:2B:34:14:AE:5F:61:A1:20:5A:BF:52
Authority key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
Certificate issuer: /CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Certificate serial: 0199FC8F936851E8FABEABB34A82B70D19B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 13:01:31 +0000
Manifest this update: Sun 19 Oct 2025 13:01:31 +0000
Manifest next update: Mon 20 Oct 2025 13:01:31 +0000
Files and hashes: 1: bn8ivutSxuUaJCKxORQu6gP7XU0.crl (hash: NwEw3ocGyNl2XLHUIooLG6IfpRRBbLGZe+JwJHsQHgw=)
2: z4IVFfra9dO93PZl7xdhmVhqzoE.roa (hash: 90ivV2dV0BSclFTId5ah7Fo9mKfLvO9taEvtncU7b/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:93:68:51:e8:fa:be:ab:b3:4a:82:b7:0d:19:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Validity
Not Before: Oct 19 13:01:31 2025 GMT
Not After : Oct 20 13:01:31 2025 GMT
Subject: CN=cbba0bde8df1ce33582b3414ae5f61a1205abf52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c1:4f:0b:22:50:a6:94:c8:a3:39:89:3e:ca:
71:be:82:a4:b6:6e:38:8d:ec:dc:0c:3e:f3:93:74:
d3:77:c6:74:ad:fe:26:d4:5d:6d:81:3a:df:02:3a:
dd:81:a2:60:ea:77:4f:3b:a4:c6:94:7c:73:08:ce:
0c:9c:14:24:06:e8:d9:18:8f:4e:3e:39:c1:92:27:
51:62:cc:98:50:c2:f5:2a:0f:00:ae:a3:1b:9b:f7:
f1:7a:9f:42:c4:3c:b4:cd:ee:e3:44:b1:c1:8d:6d:
49:e3:9d:17:33:aa:e7:b9:42:4f:3b:90:8c:b8:12:
70:24:7b:06:8d:57:36:ac:74:d9:48:b6:a8:14:81:
d0:54:9d:61:f7:4d:6c:60:1b:4e:9a:c9:7e:bd:0e:
bc:a2:a3:08:cb:23:81:d4:28:b5:13:77:e8:f8:c9:
f2:77:18:a9:0e:cb:70:77:6c:ad:99:66:12:6d:07:
a3:8c:e9:86:a6:55:5d:19:e9:d9:e8:4d:95:71:55:
ee:d5:0c:96:dc:a9:44:c1:86:6a:22:d0:a9:af:ee:
f1:80:5a:9c:cd:99:e3:1c:5d:84:f2:f5:36:84:e6:
76:90:b1:e1:97:87:8f:87:51:31:d9:28:93:c3:34:
15:42:6a:c5:29:6e:a0:3b:b7:fc:0b:7f:5b:f4:1b:
81:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BA:0B:DE:8D:F1:CE:33:58:2B:34:14:AE:5F:61:A1:20:5A:BF:52
X509v3 Authority Key Identifier:
keyid:6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:52:e4:94:9b:c8:22:0e:55:2f:61:29:18:8a:1c:73:f3:1c:
5f:4e:d8:35:57:5e:ee:32:33:8d:e7:e1:f9:b1:b8:d3:3d:8d:
1f:2f:31:53:70:fd:b1:7d:79:9d:93:ce:c2:59:ba:39:6f:64:
45:90:16:24:8d:77:3d:8a:5e:37:43:b7:91:ce:80:7c:d3:b6:
13:00:a2:f4:02:77:fa:d7:d3:c5:69:cb:b2:fd:5f:0e:fa:02:
30:d7:7d:90:59:9e:87:51:f2:18:59:99:6d:a6:ea:f2:ee:9f:
73:f4:ca:21:cd:a6:93:98:98:b6:e2:5c:20:c5:bb:18:f8:e9:
91:0f:37:cb:26:31:ab:23:e7:75:3c:d0:ba:69:58:c9:f3:8a:
1c:f8:b7:e5:74:35:55:6e:b9:00:b5:37:32:a6:7b:a7:db:51:
8e:e2:59:fa:c5:7c:ae:cc:67:22:67:7c:cf:64:1a:ec:fd:33:
56:eb:b9:00:d4:92:0b:e4:f4:0a:20:3c:68:2e:e8:a0:dc:41:
c4:1d:1f:59:1c:25:d2:63:4a:31:67:71:81:9a:37:20:af:46:
b5:dd:16:44:e0:4c:57:1e:70:00:ae:92:63:1e:7b:be:dd:7f:
de:7a:9a:b6:7a:fd:85:08:d2:09:87:e0:e5:5c:71:62:2d:a0:
b4:af:2e:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j5NoUej6vquzSoK3DRm3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlN2YyMmJlZWI1MmM2ZTUxYTI0MjJiMTM5MTQyZWVhMDNm
YjVkNGQwHhcNMjUxMDE5MTMwMTMxWhcNMjUxMDIwMTMwMTMxWjAzMTEwLwYDVQQD
EyhjYmJhMGJkZThkZjFjZTMzNTgyYjM0MTRhZTVmNjFhMTIwNWFiZjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MFPCyJQppTIozmJPspxvoKktm44
jezcDD7zk3TTd8Z0rf4m1F1tgTrfAjrdgaJg6ndPO6TGlHxzCM4MnBQkBujZGI9O
PjnBkidRYsyYUML1Kg8ArqMbm/fxep9CxDy0ze7jRLHBjW1J450XM6rnuUJPO5CM
uBJwJHsGjVc2rHTZSLaoFIHQVJ1h901sYBtOmsl+vQ68oqMIyyOB1Ci1E3fo+Mny
dxipDstwd2ytmWYSbQejjOmGplVdGenZ6E2VcVXu1QyW3KlEwYZqItCpr+7xgFqc
zZnjHF2E8vU2hOZ2kLHhl4ePh1Ex2SiTwzQVQmrFKW6gO7f8C39b9BuBswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMu6C96N8c4zWCs0FK5fYaEgWr9SMB8GA1UdIwQY
MBaAFG5/Ir7rUsblGiQisTkULuoD+11NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80MmY1NGItNTdjMC00MjRhLWFjZjUt
NGRkNGQwZjUzODQ5LzEvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS80MmY1NGItNTdjMC00MjRhLWFjZjUtNGRkNGQwZjUzODQ5
LzEvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVLklJvI
Ig5VL2EpGIocc/McX07YNVde7jIzjefh+bG40z2NHy8xU3D9sX15nZPOwlm6OW9k
RZAWJI13PYpeN0O3kc6AfNO2EwCi9AJ3+tfTxWnLsv1fDvoCMNd9kFmeh1HyGFmZ
babq8u6fc/TKIc2mk5iYtuJcIMW7GPjpkQ83yyYxqyPndTzQumlYyfOKHPi35XQ1
VW65ALU3MqZ7p9tRjuJZ+sV8rsxnImd8z2Qa7P0zVuu5ANSSC+T0CiA8aC7ooNxB
xB0fWRwl0mNKMWdxgZo3IK9Gtd0WROBMVx5wAK6SYx57vt1/3nqatnr9hQjSCYfg
5VxxYi2gtK8u4Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:59 2025 by rpki-client